GNU News Articles
Recent news articles refferecing the vendors vulnerabilities.
Looney Tunables bug exploited for cryptojacking - Help Net Security
Kinsing threat actors have been exploiting the recently disclosed Looney Tunables vulnerability to target cloud-native environments.
Hackers exploit Looney Tunables Linux bug, steal cloud creds
The operators of the Kinsing malware are targeting cloud environments with systems vulnerable to

Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
Kinsing threat actors spotted exploiting the Linux flaw "Looney Tunables" to breach cloud environments. Learn how they're broadening their attacks.
Uncursing the ncurses: Memory corruption vulnerabilities found in library | Microsoft Security Blog
A set of memory corruption vulnerabilities in the ncurses library could have allowed attackers to chain the vulnerabilities to elevate privileges and run code in the targeted program's context or perform other malicious actions.
'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits
Following the publication of the critical Linux security vulnerability, security specialists released PoC exploits to test the implications of CVE-2023-4911.
"Looney Tunables" bug allows root access on Linux distros (CVE-2023-4911) - Help Net Security
A vulnerability (CVE-2023-4911) in the GNU C Library (aka glibc) can be exploited to achieve root on many Linux distributions.
Exploits released for Linux flaw giving root on major distros
Proof-of-concept exploits have already surfaced online for a high-severity flaw in GNU C Library's dynamic loader, allowing local attackers to gain root privileges on major Linux distributions.
'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover
The flaw poses a significant risk of unauthorized data access, system alterations, potential data theft, and complete takeover of vulnerable systems, especially in the IoT and embedded computing space.

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions
New Linux vulnerability (CVE-2023-4911) named Looney Tunables found in the GNU C library's dynamic loader. Exploitation could lead to root privileges.
New 'Looney Tunables' Linux bug gives root on major distros
A new Linux vulnerability, known as 'Looney Tunables' and tracked as CVE-2023-4911,ย enables local attackers to gain root privileges by exploiting a buffer overflow weakness in the GNU C Library's ld.so dynamic loader.
Microsoft Flushes Out 'Ncurses' Gremlins
The maintainers of the widely used library recently patched multiple memory corruption vulnerabilities that attackers could have abused to, ahem, curse targets with malicious code and escalate privileges.